We would like a feature that requires all users, even admins and super-admins, to be forced to use SSO, as a checkbox setting that can be enabled or disabled via Admin > Security > SSO.
I can certainly appreciate the need to have an admin account able to bypass SSO for break-glass purposes, but it would be far better if we could nominate a single admin account for this purpose rather than allow all admins to bypass SSO. SSO with Entra affords us lots of additional protection controls via Conditional Access which are effectively lost if all admins can simply bypass it.
Log in to comment and vote
Comments1
Purple Blueberry
Jan 28
I can certainly appreciate the need to have an admin account able to bypass SSO for break-glass purposes, but it would be far better if we could nominate a single admin account for this purpose rather than allow all admins to bypass SSO. SSO with Entra affords us lots of additional protection controls via Conditional Access which are effectively lost if all admins can simply bypass it.